Trusted project boundaries
Horme only starts work in repositories you explicitly add and trust.
Trust a repository
Select the repository through Horme and confirm that you trust agents to work there. A browser page alone cannot silently trust a local path.
Boundary limits
Git worktrees separate changes between runs. They do not prevent a local process from reading other files your Mac user can access.